Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
File: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft (raw, json)
Hash identifier: XsxxJ+bhpbN+H9rjAFdq5WXL+Gp28C3a5FRiXLBwOsM=
Subject key identifier: 01:DF:89:9F:7A:41:4A:5D:FD:0D:88:C0:7D:38:49:44:48:66:89:35
Authority key identifier: 30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
Certificate issuer: /CN=307a4415bad40b643e10bec4d282cd3072ba56da
Certificate serial: 019D2703F780C679945F591CAEC104C62770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:04 +0000
Manifest this update: Wed 25 Mar 2026 22:01:04 +0000
Manifest next update: Thu 26 Mar 2026 22:01:04 +0000
Files and hashes: 1: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl (hash: 9KUUmXp78nQf2X/sZ7mLJAEymiHw+H4SkMILlAmup88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f7:80:c6:79:94:5f:59:1c:ae:c1:04:c6:27:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a4415bad40b643e10bec4d282cd3072ba56da
Validity
Not Before: Mar 25 22:01:04 2026 GMT
Not After : Mar 26 22:01:04 2026 GMT
Subject: CN=01df899f7a414a5dfd0d88c07d38494448668935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:b5:5f:c0:95:03:06:44:d9:f5:65:3e:21:
e5:8e:15:a1:b8:29:05:d3:c2:54:79:91:6c:e6:22:
39:29:08:70:13:39:de:8b:91:a0:86:9d:9a:b4:43:
00:7d:bb:18:c8:61:eb:75:1f:91:1e:46:ad:cc:3e:
be:dd:d8:d8:02:df:df:0a:b8:f8:aa:cb:aa:9a:94:
a5:54:6d:57:13:33:06:db:bd:3b:09:30:94:cc:e1:
18:79:97:4a:12:63:4b:44:11:f5:9c:3f:72:a1:37:
6b:cf:17:61:5e:d2:13:24:d6:11:0a:93:5d:a2:de:
8d:c5:b7:3f:9c:fe:1d:9d:fc:50:9d:29:34:a3:47:
61:30:68:f1:72:23:98:8c:eb:d3:11:69:ae:a3:e5:
0a:3f:fc:7d:87:5c:62:b7:64:1f:cd:ae:d9:dc:a0:
52:a5:03:20:83:ed:5a:ec:57:a6:50:0f:fb:f3:db:
ea:54:3e:22:3d:9a:93:c1:5b:96:c8:27:36:26:84:
0d:b6:a6:9b:ca:90:23:49:34:ee:1f:d9:3e:8b:70:
15:ed:a8:1e:d5:b5:a1:19:45:71:54:17:e3:9d:60:
a7:5f:dc:20:a9:5b:95:d6:b0:8a:d0:40:cf:c3:d5:
43:32:4d:9f:98:7c:dc:54:10:e1:91:b1:ba:63:a4:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DF:89:9F:7A:41:4A:5D:FD:0D:88:C0:7D:38:49:44:48:66:89:35
X509v3 Authority Key Identifier:
keyid:30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3c:24:c5:40:3d:e9:f3:e9:e8:06:25:5b:91:62:99:a1:23:
9d:cf:70:a8:55:43:86:8b:07:82:76:db:f9:1e:12:aa:6e:6e:
a4:78:d2:c8:91:f9:ec:d2:66:e6:57:e0:5f:9a:15:49:5f:4d:
b5:e4:4b:03:0d:52:da:05:15:08:db:54:88:53:83:88:fe:c7:
77:ec:72:22:b4:70:8a:84:a7:f8:75:57:a5:6f:74:0c:be:ba:
58:33:4a:82:04:d0:ca:5d:02:25:ba:d4:cb:92:8e:9d:ad:0b:
d6:b1:98:48:84:c2:50:84:02:cd:c5:70:35:80:74:9c:b6:6a:
03:fe:42:a6:ea:fb:2c:c9:3f:bb:48:cc:ff:f2:90:18:8e:61:
8c:24:4a:5d:07:5f:f4:2a:4a:b9:1d:34:e3:02:3a:7d:42:66:
60:ed:04:62:f3:86:51:28:6e:2a:f9:81:ce:92:ad:61:f5:5f:
8a:3e:0a:20:2f:21:e7:8e:58:ef:d9:a9:91:71:63:4d:e8:ac:
89:54:49:7e:f8:2d:77:84:dc:b0:7c:5d:a1:4a:a6:38:fe:19:
44:eb:69:87:e3:1b:2c:54:7d:0c:98:65:55:fc:91:ca:ef:91:
7e:c9:c9:3d:8f:e9:88:9f:25:ec:97:4d:78:9b:be:53:f8:f4:
97:cf:c5:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA/eAxnmUX1kcrsEExidwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2E0NDE1YmFkNDBiNjQzZTEwYmVjNGQyODJjZDMwNzJi
YTU2ZGEwHhcNMjYwMzI1MjIwMTA0WhcNMjYwMzI2MjIwMTA0WjAzMTEwLwYDVQQD
EygwMWRmODk5ZjdhNDE0YTVkZmQwZDg4YzA3ZDM4NDk0NDQ4NjY4OTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskW1X8CVAwZE2fVlPiHljhWhuCkF
08JUeZFs5iI5KQhwEznei5Gghp2atEMAfbsYyGHrdR+RHkatzD6+3djYAt/fCrj4
qsuqmpSlVG1XEzMG2707CTCUzOEYeZdKEmNLRBH1nD9yoTdrzxdhXtITJNYRCpNd
ot6Nxbc/nP4dnfxQnSk0o0dhMGjxciOYjOvTEWmuo+UKP/x9h1xit2Qfza7Z3KBS
pQMgg+1a7FemUA/789vqVD4iPZqTwVuWyCc2JoQNtqabypAjSTTuH9k+i3AV7age
1bWhGUVxVBfjnWCnX9wgqVuV1rCK0EDPw9VDMk2fmHzcVBDhkbG6Y6RS5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHfiZ96QUpd/Q2IwH04SURIZok1MB8GA1UdIwQY
MBaAFDB6RBW61AtkPhC+xNKCzTByulbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhwRUZiclVDMlEtRUw3RTBvTE5NSEs2VnRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hZGU2NjktY2M1Yi00ZWRkLWI5NzEt
NmFlMjg0NmQ4YTUxLzEvTUhwRUZiclVDMlEtRUw3RTBvTE5NSEs2VnRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9hZGU2NjktY2M1Yi00ZWRkLWI5NzEtNmFlMjg0NmQ4YTUx
LzEvTUhwRUZiclVDMlEtRUw3RTBvTE5NSEs2VnRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjwkxUA9
6fPp6AYlW5FimaEjnc9wqFVDhosHgnbb+R4Sqm5upHjSyJH57NJm5lfgX5oVSV9N
teRLAw1S2gUVCNtUiFODiP7Hd+xyIrRwioSn+HVXpW90DL66WDNKggTQyl0CJbrU
y5KOna0L1rGYSITCUIQCzcVwNYB0nLZqA/5Cpur7LMk/u0jM//KQGI5hjCRKXQdf
9CpKuR004wI6fUJmYO0EYvOGUShuKvmBzpKtYfVfij4KIC8h545Y79mpkXFjTeis
iVRJfvgtd4TcsHxdoUqmOP4ZROtph+MbLFR9DJhlVfyRyu+RfsnJPY/piJ8l7JdN
eJu+U/j0l8/FXg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:00 2026 by rpki-client